App::cpanminus ProjectApp::cpanminus
2 matches found
CVE-2020-16154
CVE-2020-16154 affects the Perl module perl-App-cpanminus, reported as version 1.7044. The issue is a bypass of signature verification for CHECKSUMS files, enabling potential integrity concerns. Public advisories (e.g., ALAS-2025-2802) instruct updating perl-App-cpanminus (e.g., via yum update) t...
7.8CVSS7.4AI score0.00763EPSS
Save
CVE-2024-45321
The App::cpanminus package for Perl (versions through 1.7047 ) is vulnerable to remote code execution because it downloads code via insecure HTTP . This flaw allows network attackers to execute arbitrary code on the affected system. Affected distributions include MiracleLinux 8 , TencentOS Server...
9.8CVSS7.3AI score0.00737EPSS
Save